← Back to search

io.github.firebase/firebase-mcp

firebase MIT Scanned 20d ago

Gives AI development tools Firebase-specific capabilities and expertise.

C
60.6 / 100

Versions

15.18.0latest
May 13, 2026
15.17.0
May 7, 2026
15.16.0
Apr 29, 2026
15.15.0
Apr 16, 2026
15.14.0
Apr 9, 2026
+ show 95 moreshow less
15.13.0
Apr 2, 2026
15.12.0
Mar 27, 2026
15.11.0
Mar 18, 2026
15.10.1
Mar 16, 2026
15.10.0
Mar 12, 2026
15.9.1
Mar 9, 2026
15.9.0
Mar 9, 2026
15.8.0
Feb 25, 2026
15.7.0
Feb 20, 2026
15.6.0
Feb 12, 2026
15.5.1
Jan 30, 2026
15.5.0
Jan 29, 2026
15.4.0
Jan 22, 2026
15.3.1
Jan 15, 2026
15.3.0
Jan 15, 2026
15.2.1
Jan 8, 2026
15.2.0
Jan 8, 2026
15.1.0
Dec 18, 2025
15.0.0
Dec 10, 2025
14.27.0
Dec 4, 2025
14.26.0
Nov 21, 2025
14.25.1
Nov 19, 2025
14.25.0
Nov 13, 2025
14.24.2
Nov 10, 2025
14.24.1
Nov 7, 2025
14.24.0
Nov 5, 2025
14.23.0
Oct 30, 2025
14.22.0
Oct 23, 2025
14.21.0
Oct 22, 2025
14.20.0
Oct 15, 2025
14.19.1
Oct 8, 2025
14.19.0
Oct 7, 2025
14.18.0
Oct 2, 2025
14.17.0
Sep 17, 2025
14.16.0
Sep 10, 2025
14.15.2
Sep 3, 2025
14.15.1
Aug 28, 2025
14.15.0
Aug 27, 2025
14.14.0
Aug 21, 2025
14.13.0
Aug 21, 2025
14.12.1
Aug 15, 2025
14.12.0
Aug 6, 2025
14.11.2
Jul 30, 2025
14.11.1
Jul 22, 2025
14.11.0
Jul 17, 2025
14.10.1
Jul 10, 2025
14.10.0
Jul 10, 2025
14.9.0
Jun 26, 2025
14.8.0
Jun 20, 2025
14.7.0
Jun 12, 2025
14.6.0
Jun 4, 2025
14.5.1
May 30, 2025
14.5.0
May 29, 2025
14.4.0
May 16, 2025
14.3.1
May 9, 2025
14.3.0
May 7, 2025
14.2.2
Apr 30, 2025
14.2.1
Apr 23, 2025
14.2.0
Apr 16, 2025
14.1.0
Apr 2, 2025
14.0.1
Mar 28, 2025
14.0.0
Mar 27, 2025
13.35.1
Mar 21, 2025
13.35.0
Mar 20, 2025
13.34.0
Mar 11, 2025
13.33.0
Mar 6, 2025
13.32.0
Feb 27, 2025
13.31.2
Feb 19, 2025
13.31.1
Feb 13, 2025
13.31.0
Feb 12, 2025
13.30.0
Feb 4, 2025
13.29.3
Jan 30, 2025
13.29.2
Jan 22, 2025
13.29.1
Dec 13, 2024
13.29.0
Dec 12, 2024
13.28.0
Dec 4, 2024
13.27.0
Nov 21, 2024
13.26.0
Nov 19, 2024
13.25.0
Nov 12, 2024
13.24.2
Nov 7, 2024
13.24.1
Nov 5, 2024
13.24.0
Nov 4, 2024
13.23.1
Oct 30, 2024
13.23.0
Oct 22, 2024
13.22.1
Oct 16, 2024
13.22.0
Oct 8, 2024
13.21.0
Oct 8, 2024
13.20.2
Sep 30, 2024
13.20.1
Sep 27, 2024
13.20.0
Sep 26, 2024
13.19.0
Sep 23, 2024
13.18.0
Sep 19, 2024
13.17.0
Sep 11, 2024
13.16.0
Aug 27, 2024
13.15.4
Aug 21, 2024
0.3.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 45

test_tool
annotations: none low

A test tool

result string inputSchema object outputSchema object
list_functions
annotations: verified low

List all deployed functions in your Firebase project.

inputSchema object
readOnlyHint true openWorldHint true
get_logs
annotations: verified low

Use this to retrieve a page of Cloud Functions log entries using Google Cloud Logging advanced filters.

order enum inputSchema object
readOnlyHint true openWorldHint true
build
annotations: verified low

Use this to compile Firebase SQL Connect schema, operations, and/or connectors and check for build errors. Resolves service directories defined in the project's \

inputSchema object
readOnlyHint true
execute_in_emulator
annotations: none low

Executes a GraphQL operation against a local Firebase SQL Connect Service instance emulator. Grants access to run queries and mutations on the local emulator. **Prerequisites:** * The Firebase local emulators must be running (run \

query string inputSchema object
list_services
annotations: verified low

Use this to list existing local and backend Firebase SQL Connect services

inputSchema object
readOnlyHint true
run_test
annotations: verified low

Run a remote test.

testCase object inputSchema object testDevices array releaseBinaryFile string
readOnlyHint false
check_status
annotations: verified low

Check the status of an apptesting release test and/or get available devices that can be used for automated tests

inputSchema object
readOnlyHint true
update_template
annotations: verified low

Use this to publish a new remote config template or roll back to a specific version for the project

template object version_number number
readOnlyHint false
get_template
annotations: verified low

Use this to retrieve the specified Firebase Remote Config template from the currently active Firebase Project.

inputSchema object
readOnlyHint true
get_users
annotations: verified low

Use this to retrieve one or more Firebase Auth users based on a list of UIDs or a list of emails.

uids array emails array inputSchema object
readOnlyHint true
update_user
annotations: verified low

Use this to disable, enable, or set a custom claim on a specific user's account.

key string uid string disabled boolean inputSchema object
idempotentHint true
set_sms_region_policy
annotations: verified low

Use this to set an SMS region policy for Firebase Authentication to restrict the regions which can receive text messages based on an ALLOW or DENY list of country codes. This policy will override any existing policies when set.

inputSchema object
idempotentHint true destructiveHint true
create_project
annotations: verified low

Use this to create a new Firebase Project.

project_id string inputSchema object
readOnlyHint false destructiveHint false
read_resources
annotations: verified low

Use this to read the contents of `firebase://` resources or list available resources

inputSchema object
readOnlyHint true destructiveHint false
get_environment
annotations: verified low

Use this to retrieve the current Firebase **environment** configuration for the Firebase CLI and Firebase MCP server, including current authenticated user, project directory, active Firebase Project, and more. All tools require the user to be authenticated, but not all information is required for all tools. Pay attention to the tool requirements for which pieces of information are required.

inputSchema object
readOnlyHint true
update_environment
annotations: verified low

Use this to update environment config for the Firebase CLI and Firebase MCP server, such as project directory, active project, active user account, accept terms of service, and more. Use `firebase_get_environment` to see the currently configured environment.

inputSchema object
readOnlyHint false
login
annotations: none low

Signs the user into the Firebase CLI and Firebase MCP server. **Prerequisites:** * A Google Account is required. * Sign in is required to work with Firebase Projects and call most other Firebase tools. **When to use it:** * Use this tool when you need to authenticate the Firebase CLI/MCP server. * Use this tool to check the current login status (which account is currently authenticated). * Use this tool to switch accounts or force reauthentication when credentials expire or change. **How to use it:** * To check current login status, call the tool without any parameters. If a user is already logged in, it will return the logged-in email. * To log in (initial or after logging out), call the tool without any parameters: 1. The tool will return a login URL (\

validate_security_rules
annotations: verified low

Use this to check Firebase Security Rules for Firestore, Storage, or Realtime Database for syntax and validation errors.

type enum inputSchema object
readOnlyHint true
create_android_sha
annotations: verified low

Use this to add the specified SHA certificate hash to the specified Firebase Android App.

app_id string sha_hash string inputSchema object
readOnlyHint false destructiveHint false
logout
annotations: none low

Use this to sign the user out of the Firebase CLI and Firebase MCP server.

inputSchema object
list_projects
annotations: verified low

Use this to retrieve a list of Firebase Projects that the signed-in user has access to.

page_token string inputSchema object
readOnlyHint true idempotentHint true
get_project
annotations: verified low

Use this to retrieve information about the currently active Firebase Project.

inputSchema object
readOnlyHint true
list_apps
annotations: verified low

Use this to retrieve a list of the Firebase Apps registered in the currently active Firebase project. Firebase Apps can be iOS, Android, or Web.

inputSchema object
readOnlyHint true
deploy
annotations: verified low

Deploy resources to your Firebase project, based on the contents of firebase.json.

inputSchema object
readOnlyHint false
get_security_rules
annotations: verified low

Use this to retrieve the security rules for a specified Firebase service.

type enum inputSchema object
readOnlyHint true
init
annotations: none low

Use this to initialize selected Firebase services in the workspace (Cloud Firestore database, Firebase SQL Connect, Firebase Realtime Database, Firebase AI Logic). All services are optional; specify only the products you want to set up.

features object inputSchema object
deploy_status
annotations: verified low

Check the status of a background deployment job using its Job ID.

jobId string inputSchema object
readOnlyHint true
create_app
annotations: verified low

Use this to create a new Firebase App in the currently active Firebase Project. Firebase Apps can be iOS, Android, or Web.

inputSchema object app_store_id string
readOnlyHint false destructiveHint false
get_sdk_config
annotations: verified low

Use this to retrieve the Firebase configuration information for a Firebase App.

inputSchema object
readOnlyHint true
get_data
annotations: verified low

Use this to retrieve data from the specified location in a Firebase Realtime Database.

path string inputSchema object
readOnlyHint true
set_data
annotations: verified low

Use this to write data to the specified location in a Firebase Realtime Database.

data string path string inputSchema object
readOnlyHint false idempotentHint true
query_collection
annotations: verified low

Use this to retrieve one or more Firestore documents from a collection in a database in the current project by a collection with a full document path. Use this if you know the exact path of a collection and the filtering clause you would like for the document.

field string orderBy string inputSchema object double_value number string_value string
readOnlyHint true
list_backends
annotations: verified low

Use this to retrieve a list of App Hosting backends in the current project. An empty list means that there are no backends.

inputSchema object
readOnlyHint true
fetch_logs
annotations: verified low

Use this to fetch the most recent logs for a specified App Hosting backend. If `buildLogs` is specified, the logs from the build process for the latest build are returned. The most recent logs are listed first.

backendId string inputSchema object
readOnlyHint true
send_message
annotations: none low

Use this to send a message to a Firebase Cloud Messaging registration token or topic. ONLY ONE of `registration_token` or `topic` may be supplied in a specific call.

body string inputSchema object
list_events
annotations: verified low

Use this to list the most recent events matching the given filters. Can be used to fetch sample crashes and exceptions for an issue, which will include stack traces and other data useful for debugging.

pageSize number inputSchema object
readOnlyHint true
batch_get_events
annotations: verified low

Gets specific events by resource name. Can be used to fetch sample crashes and exceptions for an issue, which will include stack traces and other data useful for debugging.

inputSchema object
readOnlyHint true
create_note
annotations: verified low

Add a note to an issue from crashlytics. Only supported for mobile (Android and iOS) apps.

note string noteId string pageSize number inputSchema object
readOnlyHint false destructiveHint true
list_notes
annotations: mismatch low

Use this to list all notes for an issue in Crashlytics. Only supported for mobile (Android and iOS) apps.

noteId string pageSize number inputSchema object
readOnlyHint true destructiveHint true
delete_note
annotations: verified low

Delete a note from a Crashlytics issue. Only supported for mobile (Android and iOS) apps.

noteId string inputSchema object
readOnlyHint false destructiveHint true
get_report
annotations: verified low

Use this to request numerical reports from Crashlytics. The result aggregates the sum of events and impacted users, grouped by a dimension appropriate for that report. Agents must read the [Firebase Crashlytics Reports Guide](firebase://guides/crashlytics/reports) using the \

readOnlyHint true
get_issue
annotations: verified low

Gets data for a Crashlytics issue, which can be used as a starting point for debugging.

inputSchema object
readOnlyHint true
update_issue
annotations: verified low

Use this to update the state of Crashlytics issue.

inputSchema object
readOnlyHint false
get_object_download_url
annotations: verified low

Use this to retrieve the download URL for an object in a Cloud Storage for Firebase bucket.

inputSchema object use_emulator boolean
readOnlyHint true

Permissions 4

network medium
Server uses network capabilities via: axios, fetch(), http, https, net, node-fetch
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 297

low
Tool 'test_tool' has no annotations annotation_checker · 100%
info
Tool 'list_functions' annotations are consistent annotation_checker · 80%
info
Tool 'get_logs' annotations are consistent annotation_checker · 80%
info
Tool 'build' annotations are consistent annotation_checker · 80%
low
Tool 'execute_in_emulator' has no annotations annotation_checker · 100%
info
Tool 'list_services' annotations are consistent annotation_checker · 80%
info
Tool 'run_test' annotations are consistent annotation_checker · 80%
info
Tool 'check_status' annotations are consistent annotation_checker · 80%
info
Tool 'update_template' annotations are consistent annotation_checker · 80%
info
Tool 'get_template' annotations are consistent annotation_checker · 80%
info
Tool 'get_users' annotations are consistent annotation_checker · 80%
info
Tool 'update_user' annotations are consistent annotation_checker · 80%
info
Tool 'set_sms_region_policy' annotations are consistent annotation_checker · 80%
info
Tool 'create_project' annotations are consistent annotation_checker · 80%
info
Tool 'read_resources' annotations are consistent annotation_checker · 80%
info
Tool 'get_environment' annotations are consistent annotation_checker · 80%
info
Tool 'update_environment' annotations are consistent annotation_checker · 80%
low
Tool 'login' has no annotations annotation_checker · 100%
info
Tool 'validate_security_rules' annotations are consistent annotation_checker · 80%
info
Tool 'create_android_sha' annotations are consistent annotation_checker · 80%
low
Tool 'logout' has no annotations annotation_checker · 100%
info
Tool 'list_projects' annotations are consistent annotation_checker · 80%
info
Tool 'get_project' annotations are consistent annotation_checker · 80%
info
Tool 'list_apps' annotations are consistent annotation_checker · 80%
info
Tool 'deploy' annotations are consistent annotation_checker · 80%
info
Tool 'get_security_rules' annotations are consistent annotation_checker · 80%
low
Tool 'init' has no annotations annotation_checker · 100%
info
Tool 'deploy_status' annotations are consistent annotation_checker · 80%
info
Tool 'create_app' annotations are consistent annotation_checker · 80%
info
Tool 'get_sdk_config' annotations are consistent annotation_checker · 80%
info
Tool 'get_data' annotations are consistent annotation_checker · 80%
info
Tool 'set_data' annotations are consistent annotation_checker · 80%
info
Tool 'query_collection' annotations are consistent annotation_checker · 80%
info
Tool 'list_backends' annotations are consistent annotation_checker · 80%
info
Tool 'fetch_logs' annotations are consistent annotation_checker · 80%
low
Tool 'send_message' has no annotations annotation_checker · 100%
info
Tool 'list_events' annotations are consistent annotation_checker · 80%
info
Tool 'batch_get_events' annotations are consistent annotation_checker · 80%
info
Tool 'create_note' annotations are consistent annotation_checker · 80%
medium
Tool 'list_notes' claims destructive but name implies read-only operation annotation_checker · 80%
info
Tool 'delete_note' annotations are consistent annotation_checker · 80%
info
Tool 'get_report' annotations are consistent annotation_checker · 80%
info
Tool 'get_issue' annotations are consistent annotation_checker · 80%
info
Tool 'update_issue' annotations are consistent annotation_checker · 80%
info
Tool 'get_object_download_url' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 145 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: body-parser@1.19.0 (GHSA-qwcr-r2fm-qrc7) dependency_analyzer · 95%
medium
Vulnerable dependency: body-parser@1.19.0 (GHSA-v422-hmwv-36x6) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.16.4 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.16.4 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: form-data@4.0.1 (GHSA-fjxv-7rqg-78g4) dependency_analyzer · 95%
medium
Vulnerable dependency: form-data@4.0.1 (GHSA-hmw2-7cc7-3qxx) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-3ppc-4f35-3m26) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@3.0.4 (GHSA-f8q6-p94x-37v3) dependency_analyzer · 95%
medium
Vulnerable dependency: morgan@1.10.0 (GHSA-4vj7-5mj6-jm8m) dependency_analyzer · 95%
medium
Vulnerable dependency: morgan@1.10.0 (GHSA-jxfw-x594-9x9m) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.11 (GHSA-23hp-3jrh-7fpw) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.11 (GHSA-8x88-c5mf-7j5w) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.11 (GHSA-gvwx-54wh-qm9j) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.11 (GHSA-r292-9mhp-454m) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.11 (GHSA-vmf3-w455-68vh) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.11 (GHSA-w8wr-v893-vjvp) dependency_analyzer · 95%
medium
Vulnerable dependency: tmp@0.2.3 (GHSA-52f5-9888-hmc6) dependency_analyzer · 95%
medium
Vulnerable dependency: tmp@0.2.3 (GHSA-ph9p-34f9-6g65) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-3g92-w8c5-73pq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-c76h-2ccp-4975) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-cxrh-j4jr-qwg3) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.19.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-26w7-cxv4-gfx2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-376h-93r7-7g6f) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-49w6-73cw-chjr) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-5ff5-9fcw-vg88) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-c4pw-33h3-35xw) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-fvmw-cj7j-j39q) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-ggxq-hp9w-j794) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-j687-52p2-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-whqg-ppgf-wp8c) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-wrwg-2hg8-v723) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-x3h8-62x9-952g) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-xf8x-j4p2-f749) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@2.2.3 (GHSA-xr5h-phrj-8vxv) dependency_analyzer · 95%
medium
Vulnerable dependency: firebase@9.16.0 (GHSA-3wf4-68gx-mph8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-2xp9-vwfh-vxw4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-3h52-269p-cp9r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-4342-x723-ch2f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-5j59-xgg2-r9c4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-7gfc-8cq8-jh5f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-7m27-7ghc-44w9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-f82v-jwr5-mffw) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-fr5h-rqp8-mj6g) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-g5qg-72qw-gw5v) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-g77x-44xx-532m) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-gp8f-8m3g-qvj9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-mwv6-3258-q52c) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-p293-qw3h-jr36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-qpjv-v59x-3qc4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@14.1.0 (GHSA-xv57-4mr9-wg8v) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-353f-5xf4-qw67) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-8jhw-289h-jh2g) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-c24v-8rfc-w8vw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@4.2.1 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: shelljs@0.8.3 (GHSA-4rq4-32rv-6wp6) dependency_analyzer · 95%
medium
Vulnerable dependency: shelljs@0.8.3 (GHSA-64g7-mvw6-v9qj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-38r7-794h-5758) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-4vvj-4cpr-p986) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-8fgc-7cc6-rx7x) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-hc6q-2mpp-qw7j) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.5 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.5 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.11.5 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-2xp9-vwfh-vxw4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p293-qw3h-jr36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-39pv-4j6c-2g6v) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-48r7-hpm6-gfxm) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-58c5-g7wp-6w37) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-jhpw-976m-542j) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-p297-fm68-3q8c) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-p3vc-36g9-x9gr) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@19.2.0 (GHSA-q6f4-qqrg-jv6x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-58w9-8g37-x9v5) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-f3m7-gqxr-g87x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-g93w-mfhg-p222) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-hh8m-fm6v-7cvg) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-jj27-h5hq-8x99) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-jrmj-c5cx-3cw6) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@19.2.0 (GHSA-v4hv-rgfq-gp49) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-692r-grfm-v8x7) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-f3m7-gqxr-g87x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-g93w-mfhg-p222) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-hh8m-fm6v-7cvg) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-jj27-h5hq-8x99) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-jrmj-c5cx-3cw6) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-prjf-86w9-mfqv) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@19.2.0 (GHSA-rgjc-h3x7-9mwg) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-45q2-gjvg-7973) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-68x2-mx4q-78m7) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-f6mr-pjwc-34m4) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-gxx4-3xcv-f8qx) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-hqr9-c56f-3x7f) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-rfh7-fxqc-q52v) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-v3p8-whq6-r5jg) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-vpx6-8pjr-4g3v) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/platform-server@19.2.0 (GHSA-xrxm-cp7j-8xf6) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-68x2-mx4q-78m7) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-69xr-m8h6-h664) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-q63q-pgmf-mxhr) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-x288-3778-4hhx) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/ssr@19.2.0 (GHSA-xh43-g2fq-wjrj) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.15.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.15.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: firebase-tools@latest (GHSA-rcm2-22f3-pqv3) dependency_analyzer · 95%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/accountImporter.ts:47 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/gcp/secretManager.ts:224 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/management/apps.ts:592 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/emulator/tasksEmulator.ts:272 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/mcp/tools/core/get_sdk_config.ts:55 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/init/features/hosting/github.ts:657 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/init/features/hosting/github.ts:681 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/init/features/ailogic/index.ts:100 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in firebase-firebase-tools-69ba9b2/src/deploy/hosting/uploader.spec.ts:112 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firebase-firebase-tools-69ba9b2/src/deploy/hosting/uploader.spec.ts:113 entropy_analyzer · 70%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/emulator/auth/state.ts:973 entropy_analyzer · 75%
medium
Buffer.from base64 in firebase-firebase-tools-69ba9b2/src/emulator/auth/operations.ts:3108 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in firebase-firebase-tools-69ba9b2/firebase-vscode/src/webview.ts:64 entropy_analyzer · 54%
medium
High-entropy string (5.87 bits/char) in firebase-firebase-tools-69ba9b2/scripts/emulator-tests/functionsEmulator.spec.ts:485 entropy_analyzer · 53%
medium
High-entropy string (5.86 bits/char) in firebase-firebase-tools-69ba9b2/scripts/emulator-tests/functionsEmulator.spec.ts:533 entropy_analyzer · 52%
info
package.json metadata manifest_parser · 100%
info
Tool: test_tool manifest_parser · 75%
info
Tool: list_functions manifest_parser · 75%
info
Tool: get_logs manifest_parser · 75%
info
Tool: build manifest_parser · 75%
info
Tool: execute_in_emulator manifest_parser · 75%
info
Tool: list_services manifest_parser · 75%
info
Tool: run_test manifest_parser · 75%
info
Tool: check_status manifest_parser · 75%
info
Tool: update_template manifest_parser · 75%
info
Tool: get_template manifest_parser · 75%
info
Tool: get_users manifest_parser · 75%
info
Tool: update_user manifest_parser · 75%
info
Tool: set_sms_region_policy manifest_parser · 75%
info
Tool: create_project manifest_parser · 75%
info
Tool: read_resources manifest_parser · 75%
info
Tool: get_environment manifest_parser · 75%
info
Tool: update_environment manifest_parser · 75%
info
Tool: login manifest_parser · 75%
info
Tool: validate_security_rules manifest_parser · 75%
info
Tool: create_android_sha manifest_parser · 75%
info
Tool: logout manifest_parser · 75%
info
Tool: list_projects manifest_parser · 75%
info
Tool: get_project manifest_parser · 75%
info
Tool: list_apps manifest_parser · 75%
info
Tool: deploy manifest_parser · 75%
info
Tool: get_security_rules manifest_parser · 75%
info
Tool: init manifest_parser · 75%
info
Tool: deploy_status manifest_parser · 75%
info
Tool: create_app manifest_parser · 75%
info
Tool: get_sdk_config manifest_parser · 75%
info
Tool: get_data manifest_parser · 75%
info
Tool: set_data manifest_parser · 75%
info
Tool: query_collection manifest_parser · 75%
info
Tool: list_backends manifest_parser · 75%
info
Tool: fetch_logs manifest_parser · 75%
info
Tool: send_message manifest_parser · 75%
info
Tool: list_events manifest_parser · 75%
info
Tool: batch_get_events manifest_parser · 75%
info
Tool: create_note manifest_parser · 75%
info
Tool: list_notes manifest_parser · 75%
info
Tool: delete_note manifest_parser · 75%
info
Tool: get_report manifest_parser · 75%
info
Tool: get_issue manifest_parser · 75%
info
Tool: update_issue manifest_parser · 75%
info
Tool: get_object_download_url manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (128) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'set_sms_region_policy': Prompt override: 'override' poisoning · 88%
info
SBOM generated: 3024 components sbom_generator · 100%
high
Hardcoded Password found in firebase-firebase-tools-69ba9b2/src/emulator/auth/state.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%